$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/6f20e311-325e-33f5-895e-6e4a807162d7.roa File: 6f20e311-325e-33f5-895e-6e4a807162d7.roa (raw, json) Hash identifier: rJyV1mf0eJxQY+W5JylLdpyQZOFETkyu3XPNdCuc1R8= Subject key identifier: 9F:4D:15:77:3A:3F:06:5E:DF:F1:48:7C:46:FE:F5:89:61:58:F7:2E Certificate issuer: /CN=47cb54de-492e-46c3-9427-1c9e425c3663 Certificate serial: 010D0C9F432858499F249979FF2B799A03174500 Authority key identifier: 5F:AC:23:65:E9:E7:97:34:85:CB:86:0D:83:28:73:8B:0D:A3:F9:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/6f20e311-325e-33f5-895e-6e4a807162d7.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 4906 IP address blocks: 192.223.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/47cb54de-492e-46c3-9427-1c9e425c3663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/47cb54de-492e-46c3-9427-1c9e425c3663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:99:79:ff:2b:79:9a:03:17:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47cb54de-492e-46c3-9427-1c9e425c3663 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=ebe4d087-3c17-4371-b304-744e581a77af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:6d:ee:3a:b2:83:6c:52:0b:02:46:42:a8: c6:5d:f4:0a:f2:92:c4:af:34:26:b8:f4:1c:17:07: d9:6a:dc:ee:40:bb:12:11:99:06:be:2f:39:2a:0f: 00:f2:d1:0a:15:98:d2:d9:df:1c:e3:de:42:37:22: 57:17:88:cc:2b:b4:e2:35:f7:84:83:78:82:96:3b: e6:ab:7b:70:73:b4:80:fd:38:2a:43:ea:e9:08:d3: 43:ee:ff:2a:dd:77:64:99:cd:b1:a2:a7:f6:9f:23: 80:d4:b8:e0:64:30:c9:73:9a:cb:92:3b:a0:72:f3: 2a:7c:59:9a:57:68:04:c0:30:63:eb:24:c8:18:a4: 11:76:00:e6:40:c7:3f:5d:16:91:ae:b3:00:8d:d4: e0:66:14:db:61:f8:ea:16:3c:37:c5:dc:ef:fd:99: 3a:a1:04:0b:09:0d:19:b7:de:c1:4f:a9:cd:f3:76: 5f:c5:d0:1a:63:8d:9d:86:36:57:ce:97:73:ed:06: da:ae:9f:a8:49:fb:04:10:99:c1:f6:0b:23:58:fb: e0:2a:f4:02:13:d0:37:d6:9d:23:25:13:d7:0f:ce: 20:e9:86:3d:99:e2:8b:13:f8:95:ba:55:d5:7a:2a: 8e:36:9b:b3:ef:91:ad:fa:fe:9a:69:18:f9:78:f3: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4D:15:77:3A:3F:06:5E:DF:F1:48:7C:46:FE:F5:89:61:58:F7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/6f20e311-325e-33f5-895e-6e4a807162d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663/47cb54de-492e-46c3-9427-1c9e425c3663.crl X509v3 Authority Key Identifier: keyid:5F:AC:23:65:E9:E7:97:34:85:CB:86:0D:83:28:73:8B:0D:A3:F9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47cb54de-492e-46c3-9427-1c9e425c3663.cer sbgp-ipAddrBlock: critical IPv4: 192.223.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:27:69:20:ee:05:81:21:9b:e8:6a:5e:d1:c9:6f:fe:e4:5f: 26:91:f3:fc:4a:b7:d8:c7:86:3e:36:17:b7:2d:60:d2:70:c7: 65:83:f9:09:81:99:9c:91:1f:87:0b:97:bd:99:64:bd:28:3c: 5e:58:75:8d:88:82:4b:a3:eb:c9:38:6e:c4:4a:b9:ff:47:69: 48:9b:ba:6c:5f:89:68:94:ec:ae:77:9f:96:c4:56:b7:2b:f0: 00:43:8a:2e:8b:9b:96:b1:d9:b1:54:a3:16:e8:51:cb:7e:1a: 42:ab:bf:86:49:60:a1:83:a9:66:a5:86:a6:06:b0:e9:14:b8: cb:fa:3f:4d:9c:4f:e9:29:ce:23:96:37:08:d7:05:22:63:20: 2c:67:2a:ad:01:08:1d:d7:f8:df:63:b1:6f:8b:19:be:7e:bd: 10:7d:e3:be:02:6f:12:63:83:b9:13:3f:cb:09:0e:24:52:f8: cc:45:2c:ca:3f:04:8a:49:f1:80:d2:60:5c:d6:fb:ca:22:e0: 46:fb:c3:02:08:1a:08:14:6e:06:ad:ce:b1:a3:7e:b0:c1:4e: b3:7f:e2:08:e0:ea:8b:d8:62:e0:ee:49:6b:fc:33:6d:53:03: 78:d7:c9:a5:01:95:f2:b3:83:79:08:b8:a1:bd:a5:cc:ff:0d: ca:90:a7:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJl5/yt5mgMXRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjYjU0ZGUtNDkyZS00NmMzLTk0MjctMWM5ZTQyNWMz NjYzMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZWJlNGQwODctM2MxNy00MzcxLWIzMDQtNzQ0ZTU4MWE3N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaxt7jqyg2xSCwJGQqjGXfQK8pLErzQmuPQc FwfZatzuQLsSEZkGvi85Kg8A8tEKFZjS2d8c495CNyJXF4jMK7TiNfeEg3iCljvm q3twc7SA/TgqQ+rpCNND7v8q3Xdkmc2xoqf2nyOA1LjgZDDJc5rLkjugcvMqfFma V2gEwDBj6yTIGKQRdgDmQMc/XRaRrrMAjdTgZhTbYfjqFjw3xdzv/Zk6oQQLCQ0Z t97BT6nN83ZfxdAaY42dhjZXzpdz7Qbarp+oSfsEEJnB9gsjWPvgKvQCE9A31p0j JRPXD84g6YY9meKLE/iVulXVeiqONpuz75Gt+v6aaRj5ePOzFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9NFXc6PwZe3/FIfEb+9YlhWPcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80N2Ni NTRkZS00OTJlLTQ2YzMtOTQyNy0xYzllNDI1YzM2NjMvNmYyMGUzMTEtMzI1ZS0z M2Y1LTg5NWUtNmU0YTgwNzE2MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDdjYjU0ZGUtNDkyZS00NmMzLTk0 MjctMWM5ZTQyNWMzNjYzLzQ3Y2I1NGRlLTQ5MmUtNDZjMy05NDI3LTFjOWU0MjVj MzY2My5jcmwwHwYDVR0jBBgwFoAUX6wjZennlzSFy4YNgyhziw2j+VcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80N2NiNTRkZS00OTJlLTQ2YzMtOTQyNy0xYzll NDI1YzM2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwN8LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALonaSDuBYEhm+hqXtHJb/7kXyaR8/xKt9jHhj42F7ctYNJwx2WD+QmB mZyRH4cLl72ZZL0oPF5YdY2Igkuj68k4bsRKuf9HaUibumxfiWiU7K53n5bEVrcr 8ABDii6Lm5ax2bFUoxboUct+GkKrv4ZJYKGDqWalhqYGsOkUuMv6P02cT+kpziOW NwjXBSJjICxnKq0BCB3X+N9jsW+LGb5+vRB9474CbxJjg7kTP8sJDiRS+MxFLMo/ BIpJ8YDSYFzW+8oi4Eb7wwIIGggUbgatzrGjfrDBTrN/4gjg6ovYYuDuSWv8M21T A3jXyaUBlfKzg3kIuKG9pcz/DcqQp/w= -----END CERTIFICATE-----Generated at Thu May 15 05:39:01 2025 by rpki-client